Skip to content
OpenAdvisories

Product · Elastic

Logstash

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-33466

    Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

    Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The archive extraction utilities used by Logstash do not properly …

    Elastic Logstash
  • High 8.4
    CVE-2023-46672

    Logstash Insertion of Sensitive Information into Log File

    An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: * Logstash is configured to log in JSON format https://www.elastic.co/guide/…

    Elastic Logstash